How JPMC tackles software ‘trust debt’

JPMorgan Chase's CISO Patrick Opet described how the bank is reshaping third-party software risk by using purchasing power and technical controls to force vendors to improve security: suppliers are now asked to provide threat models, remediate issues faster, and support mitigations such as tokenization, confidential computing, and constrained AI-agent environments to limit data exposure and entitlements.